CVE-2020-10715

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-09-16 · updated 2026-06-17
Weakness: CWE-20

Description

A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft a URL and inject arbitrary text onto the error page that appears to be from the OpenShift instance. This attack could potentially convince a user that the inserted text is legitimate.

Affected products

Openshift: from 4.0 through 4.3.5; 3.11

References

https://bugzilla.redhat.com/show_bug.cgi?id=1767665
https://github.com/openshift/origin-web-console/pull/3173
https://bugzilla.redhat.com/show_bug.cgi?id=1767665
https://github.com/openshift/origin-web-console/pull/3173

Get alerted when CVE-2020-10715 or the next vulnerability affects your stack